Abstract: An information management method collects log information of one or more home electrical apparatuses corresponding to service providers. Display screen data is generated which indicates a status of the log information. The display screen data includes groups of information which each contain information on an apparatus, a service provider corresponding to the apparatus, and log information output from the apparatus. Provision of the log information of each group is individually selectable. The display screen data is provided via a network to a display terminal that performs access to a server device. Information is received from the display terminal, which indicates that selection on whether or not provision of the log information is performed. Provision of the log information is not performed on the selected group when a determination is made that refusal of provision of the log information on the selected group is performed.

Abstract: A method includes establishing a wireless link between a wireless interface of an endpoint and a WAP; exchanging, through the wireless link, network traffic associated with execution of an application at the endpoint; executing, at the endpoint, a security routine to monitor a security status of the endpoint; establishing, through the wireless link, a secure channel that shares the wireless link with the network traffic of the application, the secure channel to extend from the security routine to a supervisor through the wireless link and the WAP; conveying, from the security routine and through the secure channel, an indication of the security status; receiving, at the security routine and through the secure channel, a command to change a setting of the wireless interface associated with a characteristic of the wireless link; and accessing, from the security routine, the wireless interface to effect the change in response to receiving the command.

Abstract: Aspects of the disclosure include a method and associated network device. The method includes authenticating an identity of a user of a client device after the client device is associated with an access network provider. Authenticating the identity of the user comprises receiving, from an identity provider, a credential associated with the identity, and receiving, from the identity provider, information identifying a network-based service to be applied to network traffic with the client device. The method further includes establishing, using the credential and the received information, a secure connection between the access network provider and a service provider that is capable of providing the network-based service. The method further includes receiving network traffic from the service provider. Packets of the network traffic include an assurance value that enables the client device to determine that the network-based service is being provided by the service provider.

Abstract: A broadcast receiving includes a broadcast receiver that receives a broadcast wave of a digital broadcasting service; a separator that separates coded program video data, program-cooperation data, and screen layout control information, from the broadcast wave; a video decoder that decodes the coded program video data to reproduce program video information; a cooperation information generator that interprets the program-cooperation data to generate program-cooperation information; and a control unit that, when an instruction to display a given screen is input while the presentation processor divides video display region into sub-regions based on the screen layout control information, places the program video information in one of the sub-regions, places the program-cooperation information in another sub-region, and outputs the data of the video display region as the video information, outputs information of the given screen as the video information without dividing the video display region based on the screen

Abstract: A device includes a first message queue, a second message queue, a first queue manager coupled to the first message queue, and a second queue manager coupled to the second message queue. The first message queue is configured to store messages received from a first source. The second message queue is configured to store messages received from a second source. The first queue manager is configured to, based, at least in part, on detecting that a first message is added to the first message queue, send a request to a second queue manager. The request includes an indication of the first message. The first queue manager is also configured to, based on receiving an acknowledgement from the second queue manager and determining that the acknowledgement indicates that a second message matching the first message is stored in the second message queue, output a match indicator indicating the first message.

Abstract: A control device includes a storage unit that stores an upper limit value of the number of calls that can be processed in a predetermined time using a session boarder controller (SBC) and an upper limit value of the number of signal conversion rules that can be processed using the SBC, and an arithmetic operation unit that allocates, to the SBC, an operator the number of calls of which is maximum from among a plurality of operators using the number of calls and the number of signal conversion rules for each operator and determines a combination of operators to be allocated to the SBC from among remaining operators such that an unused resource related to the number of calls and the number of signal conversion rules in the SBC becomes minimum, using the upper limit value of the number of calls and the upper limit value of the number of signal conversion rules read from the storage unit.

Abstract: Systems and methods described herein facilitate the tracking of shared ownership of assets, such as real property as well as other types of property, using distributed ledger technology (DLT) techniques. For example, in timesharing scenarios, by storing data relating to shared ownership of particular assets in a distributed ledger, such as a blockchain, various aspects of the shared ownership of the shared asset may be tracked in an immutable and secure manner with all parties involved having transparency into the data relating to the shared asset. For example, the embodiments described herein enable tracking of certain aspects relating to shared ownership of a shared asset, such as scheduling of time periods during which certain share owners may take custody, tracking of transfers of custody of the shared asset between share owners, transfer of control of smart devices associated with the shared asset, and so forth.

Abstract: A method and system for storing content includes determining candidate locations for pre-positioning a content at a content distribution system within a network. The method further includes communicating probe signals to the candidate locations, generating acknowledgement signals at candidate locations comprising storage availability data and compute data, selecting a real-time communication of the content or a pre-positioning communication of the content to form a selected communication based on dormant network capacity and at least one of a likelihood of consumption, the likelihood of consumption relative to a cost of storage, a cost of compute, and comparison of a cost of serving the content in real-time and a cost of serving the content using pre-positioning, selecting a selected content storage location for the content based on the storage availability data and compute data from the acknowledgment signals. The content is communicated to and stored at the selected content storage location.

Abstract: In an automation system, a protocol converter is provided between a first network and a second network for converting safety-related messages between the first and second networks that use different network protocols for message exchange. In the protocol converter, a single-channel filter connected to a single-channel interface determines messages having a first safety communication protocol from messages received from the interface over the first network and messages having a second safety communication protocol received over the second network. An at least dual-channel safety module connected to the single-channel filter then converts the messages with the first safety communication protocol determined by the single-channel filter into messages with the second safety communication protocol, or converts the messages with the second safety communication protocol determined by the single-channel filter into messages with the first safety communication protocol.

Abstract: A security control point (SCP) that protects target computing system is tested in-place and while active. The approach is initiated the SCP receiving and processing one or more “simulated” communication flows. To this end, a test initiator system is configured to generate and transmit communication flows to the SCP being tested. The SCP extracts the encapsulated flow, and then processes that flow through one or more of the SCP's configured protection mechanisms. Thus, the SCP processes the simulated communication flow as though it were a real session, and thus to determine what actions, if any, should be taken with respect to that flow. After processing, the simulated session traffic is shunted or otherwise diverted away from the target computing system. The results of the SCP's processing, however, are output to other systems (e.g., logging or alerting mechanisms), or they are returned to the test initiation system, e.g., for correlation, reporting, and the like.

Abstract: A configurable management system for a vehicle includes a receiving unit adapted to receive a message associated with a vehicle resource from a communication network of the vehicle. A control unit is adapted to determine a vehicle resource associated with the received message. An integration unit includes an external network connected to the control unit and the integration unit further includes at least one node, wherein the at least one node is configured to send an external message on the external network to the control unit. The control unit converts the external message to a suitable message that is sent to the vehicle resource.

Abstract: A virtual machine password reset method includes a virtual machine first sending a password obtaining request to a cloud service computing node, the cloud service computing node querying a reset password of the virtual machine in a metadata server based on the password obtaining request, the cloud service computing node returning a password obtaining response based on a result of querying the reset password of the virtual machine in the metadata server, the virtual machine configuring the reset password as a password of the virtual machine, to complete virtual machine password reset.

Abstract: A technique for improving system administration involves implementing system administration agent programs on a plurality of devices in an administered network. A deployment agent deploys the system administration agent program or a portion thereof to suitable devices when they are detected. System monitoring agents monitor the administered network to generate data. A reporting engine sends agent reports including the generated data to a system administration server. The system administration server facilitates administration of the administered network in real time.

Abstract: Enabling multi-channel communications between controllers in a storage array, including: creating a plurality of logical communications channels between two or more storage array controllers; inserting, into a buffer utilized by a direct memory access (‘DMA’) engine of a first storage array controller, a data transfer descriptor describing data stored in memory of the first storage array controller and a location to write the data to memory of a second storage array controller; retrieving, in dependence upon the data transfer descriptor, the data stored in memory of the first storage array controller; and writing, via a predetermined logical communications channel, the data into the memory of the second storage array controller in dependence upon the data transfer descriptor.

Abstract: A service implemented at a first isolated virtual network of a provider network is added to a database of privately-accessible services. Configuration changes that enable network packets to flow between the first isolated virtual network and a second isolated virtual network without utilizing a network address accessible from the public Internet are implemented. Service requests originating at the second isolated virtual network are transmitted to the first isolated virtual network via private pathways of the provider network. Metrics corresponding to service requests directed from the second isolated network to the service are collected and provided to the respective owners of one or both isolated virtual networks.

Abstract: This invention is directed to a communication processing apparatus that secures a safe connection from a non-IP-connection device to an IP-connection cloud (server). This communication processing apparatus includes a first connection unit that connects devices, a second connection unit that connects to servers, a switching unit that switches connections of the devices and the servers between the first connection unit and the second connection unit, a determiner that determines whether connection of a device to the first connection unit is permitted or unpermitted, and a connection controller that controls the switching unit in accordance with a determination result from the determiner.

Abstract: An information management device includes a memory and a processor configured to receive an access request to information related to individual, the access request including designation of a first data table including first information related to the individual and a second data table including second information related to the individual, perform, in accordance with whether the first data table and the second data table include a same key, determination of whether the individual is identified based on a combination of the first information and the second information to be included in a response to the access request, and perform a stop of output of the response when it is determined that the individual is identified based on the combination.

Abstract: Implementations generally relate to systems, apparatuses, and methods for a residential sensor device platform. In some implementations, a system includes a plurality of sensor devices. Each sensor device of the plurality of sensor devices communicates with a wireless router and with other sensor devices of the plurality of sensor devices. Each sensor device includes one or more sensors operative to sense conditions in a living space and includes one or more processors. The one or more processors operative to perform operations comprising determining one or more conditions in the living space, wherein at least one condition of the one or more conditions is associated with activity in the living space. The one or more processors are further operative to perform operations comprising sharing, with the other sensor devices, information associated with the one or more conditions.

Abstract: Systems and methods for managing a global virtual network connection between an endpoint device and an access point server are disclosed. In one embodiment the network system may include an endpoint device, an access point server, and a control server. The endpoint device and the access point server may be connected with a first tunnel. The access point server and the control server may be connected with a second tunnel.

Abstract: A method for parallel processing of a data stream is provided. In the method, a processing task is received. The processing task is configured to process a data stream that includes a plurality of segments. A split operation is subsequently performed on the data stream to split the plurality of segments into N sub-streams, where each of the N sub-streams includes one or more segments of the plurality of segments, and the N is a positive integer. Further, N sub-processing tasks are performed on the N sub-streams to generate N processed sub-streams. A merge operation is performed on the N processed sub-streams to generate a merged output data stream. The merged output data stream is identical to an output data steam that is generated when the processing task is applied directly to the data stream without the split operation.

Abstract: A method for receiving, at a communications station which has a plurality of antennas, messages from a plurality of users in wireless communication with the communications station, comprising the steps of: (i) receiving, from the users, using the plurality of antennas, time-slotted information chunks formed from the messages of the users, wherein the information chunks are free of any encoded user-identifiers representative of the users transmitting the messages; (ii) after receiving all of the information chunks, estimating vectors representative of respective communication channels between the antennas and the users based on the received information chunks; (iii) grouping the information chunks based on the estimated vectors to form clusters of the information chunks respectively associated with the users; and (iv) recovering the messages of the users from the clusters of the information chunks.

Abstract: A system for centralized monitoring and control of Internet of Things (IoT) devices comprises an abstraction module development utility and an IoT device management system. The abstraction module development utility determines one or more device-specific user interface (UI) interactions for performing an action for each of a plurality of different IoT device types and generates an abstraction module for each of the different IoT device types. The IoT device management system is configured to generate one or more non-device-specific API calls for performing the action with respect to a particular IoT device, determine an IoT device type from among the plurality of different IoT device types for the particular IoT device, and direct the one or more non-device-specific API calls for performing the action to the abstraction module for the determined IoT device type for execution against the particular IoT device.

Abstract: Methods are provided for decentralized key negotiation. One method includes initiating, by a first Internet Key Exchange (IKE) node from among a plurality of IKE nodes, a rekeying process for an Internet Protocol Security (IPSec) communication session established with a client device and serviced by a second IKE node from among the plurality of IKE nodes, and in which a first encryption key is used to encrypt traffic. The method further includes obtaining, by the first IKE node from a key value store, information about the IPSec communication session and performing, by the first IKE node, at least a part of the rekeying process in which the first encryption key is replaced with a second encryption key for the IPSec communication session.

Abstract: [Object] To provide a communication device and a communication method which are capable of achieving both an improvement in reliability of communication in which a frame is transmitted to a plurality of destinations and effective use of wireless communication resources. [Solution] The communication device includes: a communication unit configured to perform communication of a frame. The communication unit transmits a transmission acknowledgment request frame for a transmission acknowledgment response frame including frequency allocation information specifying a transmission frequency of the transmission acknowledgment response frame, and receives the transmission acknowledgment response frame which has undergone frequency division multiplexing, on the basis of the frequency allocation information.

Abstract: A method for processing virtualization of computers that are part of a group into virtual computers is provided. The method includes obtaining relationship data from the computers, where the relationship data identifies parameters used to communicate within the group. Then, the method analyzes utilization parameters for each of the computers of the group. A visual model for proposed virtualization of the group of computers is then generated. The visual model identifies hosting machines designated to define a virtual computer for each of the computers, where the visual model provides a graphical illustration of the group of computers once converted to virtual computers. The method enables adjustment of the proposed virtualization of the group of computers. Then, an execution sequence of virtualization operations to be carried out is generated, if execution of the proposed virtualization is triggered, and the execution sequence is saved to storage and accessed upon execution.

Abstract: Example methods are provided for a host to perform queue filter configuration for multicast packet handling in a software-defined networking (SDN) environment. One example method may comprise the host generating and sending a request to join an outer multicast group address to one or more multicast-enabled network devices; and configuring a queue filter based on the outer multicast group address. In response to detecting an ingress encapsulated multicast packet that includes an outer header addressed to the outer multicast group address, the host may assign the ingress encapsulated multicast packet to a particular NIC queue from the multiple NIC queues based on the queue filter; and retrieving, from the particular NIC queue, the ingress encapsulated multicast packet to generate and send a decapsulated multicast packet to a virtualized computing instance.

Abstract: Methods, systems, and devices for signal processing and wireless communication are described. For example, a device may include a plurality of antennas operable to transmit and receive communication packets via a plurality of communication protocols and an integrated circuit chip coupled to the plurality of antennas. The integrated circuit chip may comprise a first and a second plurality of processing elements. The first plurality of processing elements may be operable to receive communication packets via a first one of a plurality of communication protocols and process an optimal route. The second plurality of processing elements may be communicatively coupled to the first plurality of processing elements and operable to determine the optimal route to transmit the communication packets from a source device to a destination device based, at least in part, on transmission characteristics associated with at least one of the source or destination devices.

Abstract: Techniques for implementing a provisional mode in a multi-mode network device (i.e., a network device that supports at least first and second modes of operation) are provided. According to one embodiment, the network device can receive, while running in the first mode, a request to enter the second mode. In response to the request, the network device can enter a third mode that is a provisional version of the second mode. Then, while running in the third mode, the network device can accept one or more configuration commands or settings for the second mode while simultaneously processing live network traffic according to the first mode.

Abstract: The present disclosure relates to a pre-5th-Generation (5G) or 5G communication system to be provided for supporting higher data rates beyond 4th-Generation (4G) communication system such as long-term evolution (LTE).

Abstract: A method for functionally secure connection identification during data exchange between two communication subscribers in a communication system, wherein a first subscriber operates as a data provider with a first address identifier and a second subscriber operates as a data requester with a second address identifier, wherein in a request of safety-related data of the first subscriber in a request message, the second subscriber transmits an order number of the data request and its second address identifier and the first subscriber responds with a response message, the second subscriber subsequently checking to determine whether this message contains (i) a second address identifier of the requesting second subscriber, (ii) an order number of the request message of the second subscriber and (iii) the first address identifier of the requested first subscriber, in the event all checking steps are positive, the safety-related data being accepted and otherwise discarded.

Abstract: Techniques and solutions are provided for performing adaptive database table placement in a non-uniform memory access (NUMA) architecture. The adaptive table placement can occur in response to changing workloads on the NUMA nodes. For example, if a particular NUMA node is saturated, a database table may be moved from the memory of the saturated NUMA node to the memory of another NUMA node that is underutilized. In some cases, an entire database table is moved, while in other cases the database table is partitioned and only part of the table is moved.

Abstract: For a multi-tenant environment, some embodiments of the invention provide a novel method for (1) embedding a specific path for a tenant's data message flow through a network in tunnel headers encapsulating the data message flow, and then (2) using the embedded path information to direct the data message flow through the network. In some embodiments, the method selects the specific path from two or more viable such paths through the network for the data message flow.

Abstract: A system and method are disclosed for making Virtual Private Network (VPN) connections in networks, which currently cannot have VPNs due to technical limitations and some practices by network operators. The system and method are a solution that may be independent of VPN protocols used for making secure connections. The system and method can be used in a public cloud on the internet or a in a private network. The system and method are capable of providing VPN connections “everywhere” and in all connection scenarios.

Abstract: Intelligent connection systems disclosed herein perform autonomous connection mechanisms and provide secure connectors. A mobile device exemplifies one of the embodiments of the autonomous connection mechanism.

Abstract: Techniques for triggering a content-related action based at least in part on an identifier of an access point are described. In an example, a computing device may determine an identifier of an access point based at least in part on a connection between the computing device and the access point. Based at least in part on the identifier, the computing device may access, a profile associated with the access point and may determine, from the profile, a content-related action to perform based at least in part on the connection between the computing device and the access point. The computing device may initiate the content-related action.

Abstract: Various techniques for facilitating communication with and across a clinical environment and a cloud environment are described. For example, a method for authenticating a network device residing in the clinical environment using a token is described. An authentication proxy in the cloud environment can receive a request from a connectivity adapter in the clinical environment and retrieve a security token from an authentication system in the cloud. The connectivity adapter can use the security token to send signed requests to the authentication system.

Abstract: The disclosed embodiments generally relate to systems, methods, and apparatus for dynamic context-based electronic offer communication. In one aspect, a computer server is disclosed, comprising: a hardware processor configured to execute instructions stored in a memory to: receive location data from a mobile device; determine a context of the mobile device based on the location data; generate a database query using the determined context; send the generated query to an events database; receive a conditional electronic offer from the events database; determine user data requirements based on the conditional electronic offer; send a request based on the user data requirements to a secure server; receive user data from the secure server; generate an electronic offer communication based on the conditional electronic offer when the user data received from the secure server meets the user data requirements; and send the electronic offer communication to the mobile device.

Abstract: A data packet forwarding method and an apparatus, where the method includes: receiving, by a forwarding device, a first default flow entry of the virtual network from a controller, where the first default flow entry of the virtual network instructs the forwarding device to send a data packet to a specified forwarding device when the forwarding device looks up a first flow table based on a match item of the data packet but no flow entry is hit; receiving, a first data packet from an end system; and when the controller is faulty and the forwarding device looks up the first flow table based on a match item of the first data packet but no flow entry is hit, sending, by the forwarding device, the first data packet to the specified forwarding device using the first default flow entry of the virtual network.

Abstract: In a storage system that includes a plurality of storage devices configured into one or more write groups, quorum-aware secret sharing may include: encrypting a device key for each storage device using a master secret; generating a plurality of shares from the master secret such that a minimum number of storage devices required from each write group for a quorum to boot the storage system is not less than a minimum number of shares required to reconstruct the master secret; and storing the encrypted device key and a separate share of the plurality of shares in each storage device.

Abstract: A method includes receiving, at a data link layer (layer 2) gateway device configured to connect the physical network to the SDN network, routing data to a computing device, the computing device selected to receive a packet transmitted from the physical network to the SDN network; receiving, from a source element in the physical network, an address request for a layer 2 address of a router element in the SDN network, the address request including a networking layer address of the router element; transmitting, to the source element in response to receiving the address request, a layer 2 address of the router element using the routing data; receiving, from the source element, a routing request to route a packet to a destination element in the SDN network using the layer 2 address; routing, using the routing data, the received packet to the computing device to route to the destination element.

Abstract: Methods and systems are provided for configuring or customizing settings or parameters of different media devices for compatible operations in an automated manner. An exemplary method of configuring a device for presenting media content in conjunction with a second device involves a client device detecting the device on a wireless network, identifying performance characteristics associated with the second device coupled to the device, and automatically configuring the device for operation with the second device via the wireless network and in a manner that is influenced by the performance characteristics associated with the second device. In this regard, one or more configurable parameters or settings maintained at the device and that influence its operation may be modified via the wireless network to correspond to performance characteristics of the second device, thereby facilitating compatible interoperation with the second device.

Abstract: There is provided a method and corresponding device for transmitting a congestion indication to a group of wireless communication devices for synchronized triggering of backoff procedures in the wireless communication devices. A purpose of the synchronized triggering of the backoff procedures may be to enable deferring, in each of the wireless communication devices, transmission of scheduling request(s) until one or more backoff procedures in the considered wireless device is completed. In this way, the proposed technology provides efficient load control related to scheduling requests and/or enables a reduction of the average response time between scheduling request and grant.

Abstract: A virtual network comprising virtual machines executing at a computing environment is implemented. A software defined networking (SDN) appliance is configured to provide a connection to computing resources via a virtual network of a virtual computing environment. The SDN appliance is configured to apply policies of the virtual computing environment to data traffic on the virtual network. The SDN appliance is operable to interact with multiple network devices that are configured to act as a hardware acceleration device for processing data traffic. Virtual addresses are assigned to the network devices. The SDN appliance executes a virtual switch configured to identify data traffic sent to or received from a host and act as a proxy for the network devices and respond on their behalf.

Abstract: A service management system communicates via wide area network with gateway devices located at respective user premises. The service management system remotely manages delivery of application services, which can be voice controlled, by a gateway, e.g. by selectively activating/deactivating service logic modules in the gateway. The service management system also may selectively provide secure communications and exchange of information among gateway devices and among associated endpoint devices. An exemplary service management system includes a router connected to the network and one or more computer platforms, for implementing management functions. Examples of the functions include a connection manager for controlling system communications with the gateway devices, an authentication manager for authenticating each gateway device and controlling the connection manager and a subscription manager for managing applications services and/or features offered by the gateway devices.

Abstract: A machine automation system for controlling and operating an automated machine. The system includes a controller and sensor bus including a central processing core and a multi-medium transmission intranet for implementing a dynamic burst to broadcast transmission scheme where messages are burst from nodes to the central processing core and broadcast from the central processing core to all of the nodes.

Abstract: A system validates the establishment and/or continuation of a connection between two applications over a network using a two-stage process: (1) a local security agent executing on the same source system as the source application validates the connection against a set of policies stored locally on the source system; and (2) a local security agent executing on the same destination system as the destination application validates the connection against a set of policies stored locally on the destination system. The connection is allowed or blocked depending on the outcome of the two-stage validation. Before the validation process, a policy enforcement engine distributes copies of a trusted public certificate to the source and destination local security agents, which extend their local copies of the certificate to enable them to enforce policies without the use of a backend system.

Abstract: Aspects of this disclosure describes techniques for parsing network packets, processing network packets, and modifying network packets before forwarding the modified network packets over a network. The present disclosure describes a system that, in some examples, parses network packets, generates data describing or specifying attributes of the network packet, identifies operations to be performed when processing a network packet, performs the identified operations, generates data describing or specifying how to modify and/or forward the network packet, modifies the network packet, and outputs the modified packet to another device or system, such as a switch.

Abstract: A service management system communicates via wide area network with gateway devices located at respective user premises. The service management system remotely manages delivery of application services, which can be voice controlled, by a gateway, e.g. by selectively activating/deactivating service logic modules in the gateway. The service management system also may selectively provide secure communications and exchange of information among gateway devices and among associated endpoint devices. An exemplary service management system includes a router connected to the network and one or more computer platforms, for implementing management functions. Examples of the functions include a connection manager for controlling system communications with the gateway devices, an authentication manager for authenticating each gateway device and controlling the connection manager and a subscription manager for managing applications services and/or features offered by the gateway devices.

Abstract: Concepts and technologies disclosed herein are directed to real-time video delivery for connected home (“CH”) applications. According to one aspect of the concepts and technologies, a CH controller (“CHC”) can receive a request for delivery of a video stream captured by a CH video camera to a user device. The CHC can determine availability of a wireline communications link to a wireline network and availability of a wireless communications link to a wireless network over which to deliver the video stream to the user device. In response to determining that the wireline communications link and the wireless communications link are available, the CHC can obtain a wireline performance measurement for the wireline communications link, obtain a wireless performance measurement for the wireline communications link, compare the wireline performance measurement and the wireless performance measurement, and select either the wireline communications link or the wireless communications link based upon the comparison.

Abstract: System utilization related to memory usage can be monitored by storing host memory usage information in the corresponding host physical memory. However, retrieving this information can be a high overhead operation because it involves engaging with the operating system of each host. Moreover, storing memory usage information in the host physical memories can pose a security risk if they also store privileged data. Network interfaces according to the present disclosure provide unobtrusive and secure support for monitoring of network and other system resources such as regions of memory within host physical memories. Implementations according to the present disclosure include a plurality of memory region counters stored on a network interface. Each memory region counter corresponds to one of the memory regions located in a physical memory of a host coupled to the network interface. Each of the counters includes a system utilization metric associated with its corresponding memory region.